Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/720d8e73a4069f46302f9a4769757d0f2fbc7a25.roa
File:                     720d8e73a4069f46302f9a4769757d0f2fbc7a25.roa (raw, json)
Hash identifier:          r4QHyzfOepAnz/7egEa5liiBIzKv3pjU6NsFxadvQCI=
Subject key identifier:   90:0D:A1:00:1D:D8:11:C9:B4:78:62:70:71:04:5A:8D:34:B2:C1:94
Certificate issuer:       /CN=7e5ad0382aaf9a61199883acec8acb56379f4413
Certificate serial:       13D0AE
Authority key identifier: 13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/720d8e73a4069f46302f9a4769757d0f2fbc7a25.roa
Signing time:             Sun 12 Dec 2021 04:39:33 +0000
ROA not before:           Sat 11 Dec 2021 03:00:00 +0000
ROA not after:            Mon 11 Dec 2023 03:00:00 +0000
asID:                     266776
IP address blocks:        170.78.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1298606 (0x13d0ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5ad0382aaf9a61199883acec8acb56379f4413
        Validity
            Not Before: Dec 11 03:00:00 2021 GMT
            Not After : Dec 11 03:00:00 2023 GMT
        Subject: CN=720d8e73a4069f46302f9a4769757d0f2fbc7a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:92:57:4e:56:65:1c:6f:38:60:f6:39:83:
                    88:ab:fd:06:81:c4:0f:81:79:1f:76:63:31:cf:38:
                    79:61:a0:61:52:23:d1:bf:3f:dd:da:35:0f:fe:e8:
                    bc:08:33:05:bc:4c:b4:47:8e:bd:bb:73:a7:12:72:
                    2c:97:f4:38:53:bb:9d:28:02:03:d3:ff:62:1f:3a:
                    6d:54:1d:3d:e4:53:83:9b:79:22:c6:01:21:e4:e7:
                    07:52:16:e0:c0:e3:cf:53:b2:f8:af:a0:9d:66:b0:
                    eb:a0:65:a5:a3:12:36:32:39:2f:be:42:cc:e9:c8:
                    bb:5e:18:fa:dd:78:f9:96:d9:39:c5:e7:74:ec:d4:
                    2c:c2:03:5e:9a:39:fe:8f:48:87:39:ea:7e:22:61:
                    f1:04:f2:f0:50:73:7d:b4:69:10:96:18:e7:0a:fa:
                    0d:6c:05:49:09:eb:68:3d:de:71:78:e2:a9:4b:9e:
                    cc:7a:49:18:78:3f:d5:58:8f:72:3b:1f:4a:5c:9b:
                    87:6f:15:85:74:89:ba:7b:da:d3:65:ea:08:f0:b4:
                    ab:af:d3:30:6a:9a:ae:84:c2:88:22:ba:9a:43:bf:
                    6a:58:0a:72:eb:85:fd:67:e7:ec:e2:9b:50:04:b5:
                    8b:13:98:65:56:1d:3a:76:54:82:01:af:a3:c7:81:
                    54:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0D:A1:00:1D:D8:11:C9:B4:78:62:70:71:04:5A:8D:34:B2:C1:94
            X509v3 Authority Key Identifier:
                keyid:13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/720d8e73a4069f46302f9a4769757d0f2fbc7a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/7e5ad0382aaf9a61199883acec8acb56379f4413.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:e4:5f:5f:83:dd:a7:c2:b9:f1:c7:19:c6:07:b1:a8:24:06:
         72:c1:41:65:46:01:e4:dc:46:b4:d5:95:61:84:46:86:31:1f:
         fa:1c:70:7c:a5:66:88:01:ae:48:8f:b3:f9:da:2f:c5:1b:cc:
         19:04:b6:dd:5a:6a:90:53:5f:82:9f:dd:18:7a:61:57:a0:25:
         e2:9a:5c:b3:05:e5:5a:10:f2:53:09:f8:b3:ba:82:89:a2:d0:
         44:e4:13:93:5f:81:f9:49:22:70:a0:75:81:18:bf:1b:07:75:
         5b:81:e4:65:82:0b:7f:75:0c:5c:20:c3:39:ed:23:05:9a:fd:
         48:f5:43:9f:b2:3b:d3:6f:9f:cc:20:ff:e9:82:70:27:4d:20:
         1d:cc:d3:db:86:c4:c1:90:11:20:9c:3c:d2:3b:00:91:82:4a:
         6c:05:87:3d:d1:f2:1f:a6:1c:0e:2d:33:9a:3a:e1:04:65:c1:
         da:54:d8:88:f2:e3:dd:ea:07:4e:5b:87:eb:af:11:68:4d:8d:
         e1:4c:08:2c:f6:74:98:c6:f8:e1:19:ba:3e:0d:fe:87:e4:c3:
         2f:2a:cb:4e:6b:62:5b:6e:0a:58:c5:9f:a4:77:67:e2:e4:63:
         94:93:6e:38:67:57:90:57:cd:e1:ef:9b:43:88:c3:69:93:c8:
         50:0f:03:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 10 08:27:16 2023 by rpki-client on console-fra.rpki-client.org